1 1. (Once Amended) An ephemeral-output-only browser {hat protects multiple formats of 

2 content received by the ephemeral-output-only browser. 
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2. (Once Amended) A system for protecting content distributed through a network 



composing: 



a client computer operable focxonnecting to'the network^and for executing a 
client program that is capable of protecting contenMnnuiWple formats and limits use of 
the content once the content is distributed to the client computer through the network; and 

a server computer Xperable for connecting to the network and for executing a 
security program for securing the content distributed through the network. 



1 3. The system of claim 2, wherein the client progra/fi is an ephemeral-output-only 

2 web browser. 

1 4. The system of claim 2, wherein the client program is an add-in security module 

2 for executing as part of a standard web browser and wherein user control over 

3 reproduction of the content, in at least/one form, is limited. 



1 5. The system of claim 2, Wherein the client program executes as a separate window 

2 in a standard web browser an/ wherein user control over reproduction of the content, in at 

3 least one form, is limited. 
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1 6. (Once Amended) The system of clairnX wherein the security program distributes the 

2 content to the client computer only vynen the c^npt cojprputer is executing the client 

3 program. 



1 7. The system of claim 2, wherein the security program secur/s the content using a 

2 common security model. 

1 8. The system of claim 2, wherein the security program secures a portion of the 

2 content using an individual security model. 

1 9. The system of claim 2, wherein the client program limits user control over the 

2 content through a technique chosen from the group consisting of: 

3 message monitoring, clipboard flushing, function disabling, source code 

4 encryption, content localization, secure document packaging, cache encryption, and 

5 device content monitoring, 

6 and wherein user control over reproduction of the content in any non-ephemeral 

7 output manner is prevented; 



10. (Once Amended) A method of enabling a jarovider y to protect content distributed on a 
network comprising: 

acquiring a server security progra 

executing the server security program on al£ervej>cornputer connected to the 
network; and 
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6 distributing the content only to/a client} compute/ executing a limited-user client 

7 program which is capable of protecting content in iprfultiple formats and limits at least one 

8 form of reproduction of the oemtent. 



1 11. The method of claim 10, further comprising: 

2 acquiring a plurality of copies of the limited/user client program; and 

3 downloading one of the plurality of copies/to the client computer. 

1 12. The method of claim 10, wherein distributing the content comprises: 

2 obtaining a promise of compensation from a user of the client computer. 

1 13. The method of claim 12, wherein the compensation is a one-time fee. 

1 14. The method of claim 12, wherein/the compensation is a subscription fee. 

1 15. The method of claim 12, wherein the compensation is a per-session fee. 

1 16. The method of claim 12, wh/rein the compensation is a per-access fee. 



1 17. The method of claim 12^wherein the limited-use client program disables a certain 

2 user function and the compensation comprises a fee for re-enabling the certain user 

3 function. 



1 18. The method of claim 17, wherein the certain user function modifies the content. 
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1 19. The method of claim 17 v wherein'the certain user function copies the content to a 

2 different medium. 



1 24. (Once Amended) A method for controlling access to jnformation presented by a web 
browser comprising: 

3 presenting content within a browse^vindow of the web browser, wherein the web 

4 browser is capable of protecting cpnient in mulfiple/ormats; and 

5 disabling a disallpwed user function when the content is within the browser 

6 window. 



1 25. The method of claim 24, wherein disabling the disallowed user function 

2 comprises: 
intercepting a message posted to the browse/ window; and 
hiding the content if the browser is not a foreground application. 



1 26. The method of claim 24, wherein disabling the disallowed user function 

2 comprises: 

3 clearing a commonly shared inter^&pplication memory when the inter-application 

4 memory is accessed. 



1 27. The method of claim 24 wherein disabling the disallowed user function 

2 comprises: 

3 hiding a user menu selectio/n corresponding to the disallowed user function. 
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1 28. The method of claim 24, wherein disabling the disallowed user function 

2 comprises: 

3 intercepting a keyboard message; and 

4 discarding the keyboard message if it corresponds to the disallowed user function. 



1 29. The method of claim 24, wherein disabling the disallowed user function 

2 comprises: 

3 monitoring a context for a device; ahd 

4 discarding a user action directed to/ the device when the context matches the 

5 content. 

1 30. The method of clam 24, wherein/the disallowed user function is one of a plurality 

2 of default disallowed user functions and further comprising: 

3 leaving active one of the plurality of default disallowed user functions. 



1 31. The method of 30, further comprising providing information with the content that 

2 determines the one of the plurality of default disallowed user functions to be left active. 



1 32. The method of claim 24 wherein the disallowed user function is selected from the 

2 group consisting of print, page setup, save, save as, view source, save picture as, set as 

3 wallpaper, copy, screen capturejscreen print, cut. 



1 33. The method of claim 24 further comprising managing authentication of a web 

2 client. 



1 34. The method of claim 24 further comprising processing a request from a web client 

2 for encrypted content. 



1 35. The method of claim 24 further comprising creating a unique identifier for a web 

2 client. 

1 36. The method of claim 24 further comprising encrypting the content with a key 

2 based on the unique identifier for the web client. 



1 37. The method of claim 24 whereiiYthe content comprises user perceivable 

2 information in a hyper-text markup lariguage (HTML) format. 



1 38. The method of claim 24 wherein the content comprises user perceivable streaming 

2 information. 



1 39. The method of claim 2^ wherein the content comprises at least one of video 

2 information and audio information. 



1 40. The method of claim 24 wherein the disallowed user function comprises a user 

2 function which, when allowed, provides for non-ephemeral reproduction of the content. 



1 41. The method of claim 24 wherein the content comprises user perceivable 

2 information in a scripting language format. 
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1 42. The method of claim 24 wherein the content comprises user perceivable 

2 information in a common gateway interface (CGI) language format. 

1 43. The method of claim 24/wherein the content comprises user perceivable 

2 information in a JAVA language format. 



1 44. (Once Amended) A computer-readable medium /having stored thereon computer 

2 executable instructions to cause a client digital processing system and a server digital 

3 processing system to perform a method comprising: 

4 transmitting content from the servei/aigital processing system to the client digital 

5 processing system over a network; / / / / 

6 presenting the content within/a browser window on the/client digital processing 

7 system, wherein the browser window is capable of protecting content in multiple formats; 

8 and / V 

9 disabling a disallowed user function when the content is within the browser 

10 window, wherein the disallowed user function comprises a user function which, when 

1 1 allowed, provides for non-ephemeral reproduction of the content. 



1 45. The computer-readable medium of claim 44 wherein disabling the disallowed user 

2 function comprises: / 

3 intercepting a message posted to the browser window; and 

4 hiding the content if the browser is not a foreground application. 
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1 46. The computer readable medium of claim 44 wherein disabling the disallowed user 

2 function comprises: / 

3 clearing a commonly shared inter-application memory if the inter-application 

4 memory is accessed. / 

1 47. The computer readable medium of claim 44rwherein disabling the disallowed user 

2 function comprises: / 

3 hiding a user menu selection corresponding to the disallowed user function. 

1 48. The computer readable medium of claim 44, wherein disabling the disallowed 

2 user function comprises: / 

3 intercepting a keyboard message/ and 

4 discarding the keyboard message if it corresponds to the disallowed user function. 

1 49. The computer readable medium of claim 44, wherein disabling the disallowed 

2 user function comprises: / 

3 monitoring a context for A device; and 

4 discarding a user action directed to the device when the context matches the 

5 content. / 

1 50. The computer readable medium of claim 44 further comprising instructions to 

2 cause the server digital processing system to manage the authentication of the client 

3 digital processing system. 

i 
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1 51. The computer readable medium of claim 44 further comprising instructions to 

2 cause the server digital processing system to process a jfequest from of the client digital 

3 processing system for encrypted content. 

1 52. The computer readable medium of claim PA further comprising instructions to 

2 cause the client digital processing system to create a unique identifier for the client digital 

3 processing system. 

1 53. The computer readable medium of claim 52 further comprising instructions to 

2 cause the client digital processing systpm to encrypt the content with a key based on the 

3 unique identifier. 

1 54. The computer readable medium of claim 44 wherein the pre-determined function 

2 is selected from the group consisting of print, page setup, save, save as, view source, save 

3 picture as, set as wallpaper, copy, screen capture, screen print, cut. 
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55. (Once Amended) A client digital processing systernfoF-€ontrolling access to content 
presented by a web browser, the client digitayprocessing system] comprising: 
a processor; 

a network interface logically coupled to tfie fcrocessor/o receive the content; 
a browser logically coupled tc/ the network interface to present the content within 



a browser window; and 

a security module capable/ of protecting 



content in multiple formats and logically 



coupled to the browser to disable disallowed user functions when the content is in the 
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9 browser window, wherein the disallowed user function comprises a user function which, 



>n cc^mr. 



10 when allowed, provides for non-ephemeral reproduction of the content. 
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56. The client digital processing system of claim 55, wherein the security module 
comprises: 

a message monitor to intercept a message posted to the browser window; and 

/ 1 / 

a browser controller logically coupled to the message monitor to hide the content 

/ / ; 

if the browser is not a foreground application. 

/ 



1 57. The client digital processing system of claim 55, wherein the security module 

2 comprises a browser controller that^lears a commonly shared inter-application memory 

3 when the inter-application memory is accessed. 




1 



1 58. The client digital processing system of claim 55, wherein the security module 

V 

2 comprises a browser controller that encrypts the content. 



1 59. (Once Amended) A^server digital proce/ssing system fpr-€Q|itrolling access to content 

2 distributed to a client digital processing system, the ^6rver digital processing system 

3 comprising: 

4 a processor; 

5 a network interface logically coupled to [the 

6 content from the client digital prcwcessingsys 

/ b 

7 a server module logically coupled to the network interface to distribute the content 

8 to the client digital processing/ystem in response to the request; and 



processor to receive a request for the 
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a security module logically coupledtO'tlie serve^module^p determine if the 
request is from a client digital processing system executing a limited-use client program 



which is capable of protecting content 
of non-ephemeral reproduction 



;ntin multiple^ 



ormats'and prevents at least one form 
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60. The server digital processing system of claim 59, wherein the security module is 
further operable to: 

create a secure document object containing the'content if the content is protected 
under an individual security model; and 

pass the secure document object to the / server module for distribution in response 
to the request. 



1 61. The server digital processing^ystem of claim 59, wherein the security module is 

2 further operable to: 

3 encrypt the content if the content is protected under a common security model; 

4 and 

5 pass the encrypted content to the server module for distribution in response to the 

6 request. 



62. (Once Amended) A computer-readable medium having stored thereon computer 
executable instructions to cause a client digital processing system to perform a method 
comprising: 

receiving protected content from a server digital processing system; 
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5 presenting the protected content within a browser window that is capable of 

6 protecting content in multiple formats; and 

7 disabling disallowed user functions when the protected content is in the browser 

8 window, wherein the disallowed user function comprises a user function which, when 

9 allowed, provides for non-ephemeral reproduction of the content. 



1 63. The computer-readable medium of claim 62 further comprising: 

2 intercepting a message posted totne browser window; and 

3 hiding the protected content if the browser is not a foreground application. 

1 64. A computer readable medium of claim 62 wherein the disallowed user function is 

2 enabled when content in the browser window is not designated to be protected such that 

3 non-ephemeral reproduction^ such content is allowed. 

1 65. (Once Amended) A computer-readable medium having stored thereon computer 

2 executable instructions to cause a server digital processing system to perform a method 

3 comprising: / A \ 

4 receiving a request for protected content/rrdm a client digital processing system; 

5 determining if the request is from a client digital processing system executing a 

6 limited-use client program that is capable on protecting content in multiple formats; and 

7 distributing the protected content to thefcjient digital processing system in 

8 response to the request only if tne client digital processing system is executing the 

9 limited-use client program, wherein the limited-use client program prevents at least one 
10 form of non-ephemeral reproduction of the protected content. 
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1 66. The computer-readable medium of claim/65, further comprising: 

2 creating a secure document object containing the protected content if the content 

3 is protected under an individual security modefl; and 

4 passing the secure document object tp the server module for distribution in 

5 response to the request. 

1 67. The computer-readable medium or claim 65, further comprising: 

2 encrypting the protected content f the content is protected under a common 

3 security model; and 

4 passing the encrypted content tf> the server module for distribution in response to 

5 the request. 

1 68. A computer readable medium of claim 65 wherein the limited-use client program 

2 disables a disallowed user function that comprises a user function which, when allowed, 

3 provides for non-ephemeral reproduction of the content. 

1 69. A computer readable medium of claim 68 wherein the disallowed user function is 

2 enabled when content is not designated to be protected such that non-ephemeral 

3 reproduction of such content/is allowed. 



1 70. A computer readabl 

2 the protected content is 

3 system and the server digit 



5 medium of claim 69 wherein non-ephemeral reproduction of 
allqwed after a transaction between the client digital processing 
al processing system. 



\ 
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1 71. A computer readable medium of claim 70 wherein the transaction comprises at 

2 least one of a compensation to a provider of the protected content or an exchange of 

3 identification of the client digital processing system. 

1 72. A computer readable medium qaving stored thereon a secure document package 

2 data structure comprising: 

3 a document package header fiejld containing data representing a description for the 

4 secure document package; 

5 a delivery object field containing data representing executable code to manage the 

6 secure document package described fey the document package header field; and 

7 a document field containing data representing content contained in the secure 

8 document package described by the/document package header field. 

1 73. The computer readable medium of claim 72, wherein the document package 

2 header field comprises: 

3 a package identifier field fcontaining data representing an identifier for the secure 

4 document package. 



1 74. The computer readable/medium of claim 72, wherein the document field 

2 comprises: 

3 a document identifier jField containing data representing an identifier for the 

4 content. 



15 



• * 

) 

1 75. A computer data signal embodied in a carrier wave and encoding a data structure 

2 containing protected content comprising: / 

3 a document package header field/containing data representing a description for the 

4 secure document package; / 

5 a delivery object field containing data representing executable code to manage the 

6 secure document package described hy the document package header field; and 

7 a document field containing aata representing content contained in the secure 

8 document package described by the document package header field. 

1 76. The computer readable medium of claim 75, wherein the document package 

2 header field comprises: / 

3 a package identifier field containing data representing an identifier for the secure 

4 document package. / 

1 77. The computer readable medium of claim 75, wherein the document field 

2 comprises: I 

3 a document identifier field containing data representing an identifier for the 

4 content. I 



78. (Once Amended) A system for controlling reproduction of content on a client 
computer comprising: / 

means for receiving content to be protected; and 
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4 means for displaying the protected content on the client computer while 

5 preventing at least one form of reproduction of the content, wherein the means for 

6 displaying is capable of protecting content in multiple formats. 



1 79. The system of claim 78, wherein the means for displaying comprises: 

2 means for disabling user functions that reproduce the content. 

1 80. The system of claim 79, wherein the means for displaying further comprises: 

2 means for enabling disabled user functions under pre-determined conditions. 



1 81. (Once Amended) A system for controlling reproduction of content stored on a server 

2 computer comprising: / I 

3 means for protecting content storejz on the server; / 

4 means for receiving a request for the protected content, and 

5 means for determining if the request is/from a requestor that is capable of 

6 protecting content in multiple/ormats and4iniit&i€production of protected content. 



1 82. The system of claim 81 , wherein the means for protecting comprises: 

2 means for creating a secure document object containing the content. 

1 83. The system of claim 8 l^wherein the means for protecting comprises: 

2 means for Qncrfptxrig^ content. 
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1 84. (New) A method for controlling access to informatior/ presented by a web browser 

2 comprising: 

3 presenting content within a browser window otfthe web browser, wherein the web 

4 browser is capable of protecting content in multiple formats; 

5 intercepting a message posted to the browser window; and 

6 hiding the content if the browser window/is not a foreground window. 

1 85. (New) The method of claim 84 further comprising managing authentication of a web 

2 client. 

1 86. (New) The method of claim 84 furtl/er comprising processing aVequest from a web 

2 client for encrypted content. 



1 87. (New) The method of claim 84/further comprising creating a uniqi/e identifier for a 

2 web client 

/ ^ 

1 88. (New) The method of claim 84 further comprising encryjffing the content with a key 

2 based on the unique identifier/for the web client. 



1 89. (New) The method of claim 84 wherein the content comprises user perceivable 

2 information in a hyper-text markup language (HTML) format. 

1 90. (New) The methoq of claim 84 wherein the content comprises user perceivable 

2 streaming information! 
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1 91. (New) The method of claim 84 wherein the content comprises at least one of video 

2 information and audio information. 



1 92. (New) The method of claim 84 whereir/ the content 

2 information in a scripting language formsit. 



1 93. (New) The method of claim 84 wherein the content comprises user perceivable 

2 information in a common gatewWinterface (CGI) l^ujtge^ormat. 

1 94. (New) The method of claim 84 wherein the content comprises user perceivable 

2 information in a JAVA language format. 




user perceivable 
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